`basic-ftp`

Ecosystem:
npm

Package URL:
pkg:npm/basic-ftp

Total PRs:
2,120 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
1,512 repositories

Unique Repos (30 days):
166 repositories

Security Advisories

Basic FTP has Path Traversal Vulnerability in its downloadToDir() method

GHSA-5rq4-664w-9x2c CVE-2026-27699 CRITICAL published 3 months ago • updated 1 day ago

The `basic-ftp` library contains a path traversal vulnerability in the `downloadToDir()` method. A malicious FTP server can send directory listings...

basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

GHSA-rpmf-866q-6p89 CVE-2026-44240 HIGH published 25 days ago • updated 9 days ago

## Summary `basic-ftp` is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compro...

basic-ftp has FTP Command Injection via CRLF

GHSA-chqc-8p9q-pq6q CVE-2026-39983 HIGH published about 2 months ago • updated 10 days ago

## Summary `basic-ftp` version `5.2.0` allows FTP command injection via CRLF sequences (`\r\n`) in file path parameters passed to high-level path ...

basic-ftp: Incomplete CRLF Injection Protection Allows Arbitrary FTP Command Execution via Credentials and MKD Commands

GHSA-6v7q-wjvx-w8wg HIGH published about 2 months ago • updated 25 days ago

## Summary basic-ftp's CRLF injection protection (added in commit 2ecc8e2 for GHSA-chqc-8p9q-pq6q) is incomplete. Two code paths bypass the `prote...

basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list()

GHSA-rp42-5vxx-qpwr CVE-2026-41324 HIGH published about 2 months ago • updated 5 days ago

### Summary `basic-ftp@5.2.2` is vulnerable to denial of service through unbounded memory growth while processing directory listings from a remote ...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump basic-ftp from 5.2.0 to 5.2.2

nestjs/elasticsearch #1846

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

janaagaard75/developer-quotes-wallpapers #34

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

pa11y/pa11y #811

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2 in /functions in the security-patches group across 1 directory

guiruggiero/website #160

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

chore(deps-dev): bump basic-ftp from 5.2.1 to 5.2.2

anewbegin95/project-pizza #243

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 in /frontend in the npm_and_yarn group across 1 directory

OWASP/Nest #4524

5.2.1 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

build(deps): bump basic-ftp from 5.2.1 to 5.2.2 in the npm_and_yarn group across 1 directory

cnkang/mathgenie #576

5.2.1 → 5.2.2 Patch PR

Closed about 2 months ago 5 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

PopupMaker/Popup-Maker #1201

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

Bump basic-ftp from 5.2.0 to 5.2.2

bahnzumberg/zuugle-api #384

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

Axelads/BotScalp #1

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Chore(deps): Bump basic-ftp from 5.2.0 to 5.2.2

DEFRA/forms-runner #1157

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 2 updates

planttheidea/fast-copy #129

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.2

carstingaxion/term-image-block #11

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 4 directories with 15 updates

haardikppatel/tpro #8

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

[chore(deps)]: Bump basic-ftp from 5.2.0 to 5.2.2

0xJonaseb11/aeternum #374

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

JanSzewczyk/portfolio #63

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

Bump the npm_and_yarn group across 18 directories with 12 updates

Canmarha/vscode #47

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

FigureCollecting/scraper #151

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump basic-ftp from 5.2.0 to 5.2.2

cline/cline #10217

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

Bump basic-ftp from 5.2.0 to 5.2.2

carstingaxion/todays-hours-plugin #14

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

build(deps): Bump the npm_and_yarn group across 1 directory with 11 updates

CasianBlanaru/bitv-audit-tool #128

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 3 comments

Bump the npm_and_yarn group across 1 directory with 5 updates

ryanrishi/ryanrishi.com #460

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 4 directories with 7 updates

AKJUS/vscode #1579

5.2.0 → 5.2.2 Patch PR

Open about 2 months ago 1 comment

[DEPENDABOT][SHARED] Weekly npm updates(deps): Bump basic-ftp from 5.2.0 to 5.2.2

FilecoinFoundationWeb/filecoin-foundation #2283

5.2.0 → 5.2.2 Patch PR

Closed about 2 months ago 2 comments

build(deps): Bump basic-ftp from 5.2.0 to 5.2.1

AtCoder-NoviSteps/AtCoderNoviSteps #3377

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 4 comments

build(deps): bump the npm_and_yarn group across 14 directories with 3 updates

AKJUS/angular #502

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

fix(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1

wp-graphql/wp-graphql #3740

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1

teelicht/pi-superagents #1

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

Earlo/matrikkeli #2060

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 5 updates

hackelia-micrantha/amaryllis #29

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 2 comments

chore(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1

ScorpiusDraconis83/https-github.com-16CentAstrology-app-1 #114

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 3 directories with 3 updates

thealphakenya/qmoi-enhanced #909

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 5 comments

Bump the packages group with 36 updates

poad/github-rest-api-executor #394

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

build(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1

MarceloEyer/djzeneyer #332

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 3 directories with 13 updates

neophoenixfix-boop/prettier #13

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

getloconow/Loco_Performance_Automation #1

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1

radekderkacz/hermes-agent #6

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

VooDooNoir/Super-Voodoo #10

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 2 comments

chore(deps)(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1

KingInYellows/codemachine-pipeline #898

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 5 comments

Bump basic-ftp from 5.2.0 to 5.2.1

pancakeswap/pancakeswap-ai #56

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 11 directories with 13 updates

jeremydh911/CRM #22

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 2 comments

chore(deps): Bump basic-ftp from 5.2.0 to 5.2.1

aranyoray/komalweb #78

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

build(deps-dev): Bump basic-ftp from 5.2.0 to 5.2.1

jasperfordesq-ai/nexus-v1 #59

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

Apofis391/automatizacion-whassap #3

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

soderlind/ai-valve #7

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1

Noc2/CURYO #69

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump basic-ftp from 5.2.0 to 5.2.1

jetstreamapp/sf-formula-parser #21

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1

codeready-toolchain/devsandbox-dashboard #53

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 2 comments

build(deps-dev): bump basic-ftp from 5.2.0 to 5.2.1

sai1774296/ipl2026-picks-engine #2

5.2.0 → 5.2.1 Patch PR

Closed about 2 months ago 1 comment

Bump basic-ftp from 5.2.0 to 5.2.1 in /.config/remark

CivicActions/civicactions-a11ysite #71

5.2.0 → 5.2.1 Patch PR

Open about 2 months ago 1 comment

Package Details

Name:	`basic-ftp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/basic-ftp`
JSON API:	View JSON

Security Advisories

5

Active advisories

CRITICAL 1

HIGH 4

View All npm Advisories

Package Information

Description:

FTP client for Node.js, supports FTPS over TLS, IPv6, Async/Await, and Typescript.

Repository:	https://github.com/patrickjuchli/basic-ftp
Homepage:	https://github.com/patrickjuchli/basic-ftp#readme
Latest Release:	`5.1.0` 5 months ago
Dependent Repos:	5,188
Dependent Packages:	271
Downloads:	50,604,527
Ranking:	Top 0.3186% by dependent repos Top 0.0583% by downloads Top 0.1842% by dependent pkgs

PR Status

Open 845 (39.9%)

Merged 0 (0.0%)

Closed 1,275 (60.1%)

PR Types

Major 5 (0.2%)

Minor 1,429 (67.4%)

Patch 686 (32.4%)